Gridinsoft Logo
File Icon

The utorrent_installer.exe (utorrent) File Analysis

Technical Analysis

File Name utorrent_installer.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
SSDEEP Hash
98304:sQtk87VymQSv/fHR2pNx4g4pAmwcEjMPt0rS8a:sQh7LQSfx2tX4pqcuvri
Scanner Version 1.0.158.174
Database Version 2024-01-31 18:00:45 UTC

Suspicious File Detected

Detected by 7 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
10%
Detection Rate
3,911,600
File Size (bytes)
7/70
Engines Detected
2024-01-31
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
8ffc6874008376b73555839d5821ecb4
SHA1
aef3a79aa0a4d6ca733c3a4a263897a32363634b
SHA256
d21c9de02b2815a209894c1b5e7e6369d7ff68ef30597b8f2e39a52fbc7f3b15
SHA512
a91d6dd618ebf278e6ce12a46a40dd23b26bb19eaef09b0fe5f7c0756ce113828571957de6961ade8c74ea0214745a380e9c1ef3e94c0881218ce8e367afb14d
ImpHash
56a78d55f3f7af51443e58e0ce2fb5f6

Security Engines with Detections (7 of 70)

Malwarebytes
PUP.Optional.BundleInstaller Malicious
ESET-NOD32
a variant of Win32/uTorrent.E potentially unwanted Malicious
Ikarus
PUA.uTorrent Malicious
Antiy-AVL
GrayWare/Win32.uTorrent.e Malicious
VBA32
suspected of Trojan.Downloader.gen Malicious
Fortinet
Riskware/uTorrent Malicious
DeepInstinct
MALICIOUS Malicious
63 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: 0f7354712687fc97aa4c12cf06a41ba6
Fuzzy: 7f9d2d37d5dffecbedc00aee559479af
dHash: f0cccecc9cf8f8f0
Image Base 0x00400000
Entry Point 0x004034f7
Compilation Time 2021-09-25 21:55:49
Checksum 0x003c9fd7 (Actual: 0x003c9fd7)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports 0 functions
Resources 31 Resources
Sections 5 Sections

Digital Signatures

DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 BitTorrent Inc (US)
DigiCert Trusted Root G4 DigiCert, Inc. (US)
DigiCert Trusted Root G4 DigiCert Inc (US)

Version Information

CompanyName BitTorrent Limited
FileDescription utorrent
FileVersion 3.6.0.47004
InternalName utorrent
LegalCopyright (c) 2023 BitTorrent Limited All Rights Reserved.
ProductName utorrent
ProductVersion 3.6.0.47004
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 25,877 bytes 26,112 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 26E66BEA3B62728A217AE7BF343EBC1A
.rdata 0x00008000 5,018 bytes 5,120 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 691F0273DAD50EC603F6FEDF850B58EE
.data 0x0000a000 131,896 bytes 1,536 bytes 4.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4B75405561A3FCC45B8FE27A6808F3B5
.ndata 0x0002b000 151,552 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00050000 116,224 bytes 116,224 bytes 7.21 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 418B97BB59883C83CF8B730F26F5E001
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 31 (114,522 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 106,993 bytes
93.4%
RT_DIALOG 20 5,644 bytes
4.9%
RT_GROUP_ICON 1 118 bytes
0.1%
RT_VERSION 1 708 bytes
0.6%
RT_MANIFEST 1 1,059 bytes
0.9%

Certificate Chain Analysis

Certificate #1
Subject BitTorrent Inc
BitTorrent Inc
US
Issuer DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Serial Number 18369287908782572318116340446406628002
Certificate #2
Subject DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
DigiCert, Inc.
US
Issuer DigiCert Trusted Root G4
Serial Number 11533403529598586876501374841704918745
Certificate #3
Subject DigiCert Trusted Root G4
DigiCert Inc
US
Issuer DigiCert Trusted Root G4
Serial Number 7451500558977370777930084869016614236
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
7 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware